Microsoft Patches Record 1,413 CVEs, Including Exploited Zero-Day
October 14, 2026
Microsoft’s October Patch Tuesday fixes a record 1,413 CVEs, including CVE-2026-96951, a Windows Shell zero-day that bypasses Mark of the
Cybersecurity
Microsoft Patches Record 1,413 CVEs, Including Exploited Zero-Day
Microsoft's October Patch Tuesday fixes a record 1,413 CVEs, including CVE-2026-96951, a Windows Shell zero-day that bypasses Mark of the Web protections.
Ivanti Connect Secure Zero-Day Chain Gives Root on Patched VPNs
Volexity found actor UTA0576 chaining three Ivanti Connect Secure zero-days to gain root on a fully patched VPN appliance; one flaw remains unpatched.
DOJ Charges OpenAI Engineer Over Hidden Conference Room Recorder
A DOJ complaint charges OpenAI engineer Abdulrahman Alfozan with planting a covert recording device in an executive conference room at the company's office.
DOJ Charges 14 in North Korean IT Worker Laptop Farm Case
DOJ unsealed an indictment charging 14 people in a North Korean IT worker scheme that took in more than $3 million; the FBI searched 40 ...
Public Exploit Released for CVSS 10.0 GitLab Flaw CVE-2026-97229
Rapid7 published a proof-of-concept for GitLab CVE-2026-97229, a CVSS 10.0 flaw; Censys counts 25,766 internet-facing hosts running vulnerable versions.
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
Meta is notifying about 1,500 people after hackers used an employee's stolen credentials to take product code and a small amount of personal data from ...
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
Docker patched GhostPat, a critical Docker Hub flaw (CVE-2026-105445, CVSS 9.4) that let attackers act as other accounts at the registry level for two years.
Nextcloud Collabora Flaw CVE-2026-110447 Exploited for Webshells
SecurityOnline reports attackers are exploiting CVE-2026-110447, a CVSS 9.2 command injection in Nextcloud's Collabora CODE app, to plant PHP webshells.
ShinyHunters Claims H&M Database Breach; Retailer Sees No Compromise
ShinyHunters claims it accessed H&M internal databases covering inventory and logistics; H&M says it is investigating and sees no sign of compromise yet.
FTC Sues Sextortion Help Operator Dmitry Belkin Over $60M Fraud
The FTC sued Dmitry Belkin and Digital Forensics Corporation, alleging a fake sextortion help scheme took in at least $60 million from blackmail victims.
Ivanti Connect Secure Zero-Day Chain Gives Root on Patched VPNs
October 14, 2026
Volexity found actor UTA0576 chaining three Ivanti Connect Secure zero-days to gain root on a fully patched VPN appliance; one
DOJ Charges OpenAI Engineer Over Hidden Conference Room Recorder
October 14, 2026
A DOJ complaint charges OpenAI engineer Abdulrahman Alfozan with planting a covert recording device in an executive conference room at
DOJ Charges 14 in North Korean IT Worker Laptop Farm Case
October 14, 2026
DOJ unsealed an indictment charging 14 people in a North Korean IT worker scheme that took in more than $3
Public Exploit Released for CVSS 10.0 GitLab Flaw CVE-2026-97229
October 14, 2026
Rapid7 published a proof-of-concept for GitLab CVE-2026-97229, a CVSS 10.0 flaw; Censys counts 25,766 internet-facing hosts running vulnerable versions.
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
October 14, 2026
Meta is notifying about 1,500 people after hackers used an employee’s stolen credentials to take product code and a small
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
October 14, 2026
Docker patched GhostPat, a critical Docker Hub flaw (CVE-2026-105445, CVSS 9.4) that let attackers act as other accounts at the
Nextcloud Collabora Flaw CVE-2026-110447 Exploited for Webshells
October 14, 2026
SecurityOnline reports attackers are exploiting CVE-2026-110447, a CVSS 9.2 command injection in Nextcloud’s Collabora CODE app, to plant PHP webshells.
ShinyHunters Claims H&M Database Breach; Retailer Sees No Compromise
October 14, 2026
ShinyHunters claims it accessed H&M internal databases covering inventory and logistics; H&M says it is investigating and sees no sign
FTC Sues Sextortion Help Operator Dmitry Belkin Over $60M Fraud
October 14, 2026
The FTC sued Dmitry Belkin and Digital Forensics Corporation, alleging a fake sextortion help scheme took in at least $60
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.